2025-06-27
The Prudential Control and Resolution Authority (ACPR) has declared its compliance with the Joint Guidelines issued by European supervisory authorities regarding the estimation of annual aggregated costs and losses from major ICT-related incidents under Regulation (EU) 2022/2554. These guidelines apply to financial entities within the ACPR's competence, as defined in Article 2 of the Digital Operational Resilience Act. The ACPR mandates that these entities must take all necessary measures to ensure full compliance with the guidelines, in accordance with Articles 16 of the founding regulations of the European Banking Authority, the European Insurance and Occupational Pensions Authority, and the European Securities and Markets Authority.